Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft
File:                     gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft (raw, json)
Hash identifier:          DTWlt5JBId5rORRuw/Kn+qrHExI6TbPXiinGN96/QpA=
Subject key identifier:   CA:19:2E:05:47:FF:80:8C:E6:92:0A:40:A2:CB:38:EA:65:65:10:03
Authority key identifier: 81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
Certificate issuer:       /CN=814abafbb08ff47201d9b1ed633393b6bd92581e
Certificate serial:       0192D06CCFCEB066133E3FE0324CCE836620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft
Manifest number:          0A5E
Signing time:             Mon 28 Oct 2024 00:00:44 +0000
Manifest this update:     Mon 28 Oct 2024 00:00:44 +0000
Manifest next update:     Tue 29 Oct 2024 00:00:44 +0000
Files and hashes:         1: UOGtisrDxf01hLDPlB3HjQQUI1E.roa (hash: ue9vhgTVuMOkP6s5c9qxjN9eOhvhzwHd+sVYxVMbyZo=)
                          2: gUq6-7CP9HIB2bHtYzOTtr2SWB4.crl (hash: jZRjjhsohlxPXw5/Sq6rfWgadB+4J3eZFQTda7RqbhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d0:6c:cf:ce:b0:66:13:3e:3f:e0:32:4c:ce:83:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814abafbb08ff47201d9b1ed633393b6bd92581e
        Validity
            Not Before: Oct 28 00:00:44 2024 GMT
            Not After : Oct 29 00:00:44 2024 GMT
        Subject: CN=ca192e0547ff808ce6920a40a2cb38ea65651003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:61:87:6e:92:42:09:af:ee:2e:64:75:8b:
                    64:f0:93:16:ef:44:bb:ed:e1:57:e8:9f:77:00:7f:
                    96:15:0c:58:37:33:a1:5b:4d:f1:68:8d:6a:d1:75:
                    1e:21:1c:f4:68:61:5c:b0:24:4d:82:b8:16:a6:31:
                    b6:46:00:99:22:5d:9a:a3:a8:c5:f9:93:41:9b:29:
                    0d:47:43:14:30:be:e7:f5:4d:97:16:f1:85:f5:39:
                    f3:78:0c:5c:05:a8:8f:4d:41:c8:f0:84:47:1b:5d:
                    38:99:45:e2:4a:aa:3b:42:cb:75:7e:d8:23:e9:fc:
                    73:2f:e9:e3:08:48:07:f4:b3:19:d3:f3:84:67:f8:
                    34:f6:a4:08:50:1d:25:9e:60:f1:f1:4b:df:ca:7d:
                    65:23:ff:9f:ee:d6:73:69:60:db:05:17:a3:40:4a:
                    fd:99:e6:d1:a1:2d:b0:45:2f:2d:95:5f:38:02:38:
                    9e:53:36:94:71:f1:0f:35:cd:1c:46:90:9e:d4:35:
                    fe:b5:11:3c:0b:89:27:ed:13:1f:67:36:bb:4f:25:
                    81:9f:8c:dc:d6:52:55:2f:06:66:f1:88:21:3d:bd:
                    f2:b3:d3:5b:25:a4:1c:07:d5:b0:e3:2b:d0:98:3d:
                    76:62:84:97:cc:83:c7:5c:80:4a:5f:de:49:db:a9:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:2E:05:47:FF:80:8C:E6:92:0A:40:A2:CB:38:EA:65:65:10:03
            X509v3 Authority Key Identifier:
                keyid:81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:77:a4:8f:45:0e:0b:80:72:2f:bd:8a:68:8d:13:b4:62:
         75:5e:81:5e:59:43:e4:64:2e:e7:db:9c:fc:63:44:04:d2:e9:
         20:6e:8c:0b:00:20:38:09:c5:a1:2d:96:11:32:b4:fb:4a:db:
         d2:40:a7:20:14:16:18:3d:df:c8:62:93:92:ee:91:dc:94:e7:
         f8:23:ca:57:3d:a5:97:9d:13:bd:14:0e:45:94:d1:c7:92:75:
         4d:10:85:95:e6:40:14:c1:6c:55:be:f6:17:2b:81:a4:00:6d:
         5a:b1:0b:b3:13:1c:13:26:a2:e5:93:93:58:78:d9:76:69:4b:
         9f:92:bb:0b:9a:09:02:34:8e:eb:8a:32:1c:e3:af:29:e0:77:
         9d:6b:e5:2b:74:62:cd:54:fa:ab:b3:3c:ef:b5:d7:d3:c8:3f:
         39:d1:9c:11:b7:6c:9d:29:41:6c:47:12:e8:9a:ce:a5:1e:0f:
         68:8d:7b:41:de:b1:31:92:e2:95:38:99:4a:c2:51:ee:f6:e1:
         a1:cb:91:b9:07:24:81:0c:66:f7:36:2e:cd:49:82:1f:12:f4:
         ef:58:d6:39:1f:8b:00:c9:82:1d:29:31:f9:b7:d2:cd:f4:c1:
         26:18:b7:fe:20:8c:43:a7:69:69:9e:1a:d9:da:37:a4:fe:e2:
         f5:51:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----